last executing test programs: 8m31.077442074s ago: executing program 3 (id=24): io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0xfffff, 0xfffffffffffffffe) io_getevents(r0, 0x4, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f0000000040)) 8m30.771578658s ago: executing program 3 (id=29): unshare(0x2040400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000cc0)={'filter\x00', 0x4}, 0x68) 8m29.472975703s ago: executing program 3 (id=37): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d01, 0xec000000, 0x3}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x0, 0x8, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m28.967612398s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 8m28.52647006s ago: executing program 3 (id=45): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 8m27.988214307s ago: executing program 3 (id=47): r0 = socket(0x10, 0x803, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m27.32476206s ago: executing program 32 (id=47): r0 = socket(0x10, 0x803, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7m29.070960829s ago: executing program 1 (id=507): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 7m28.653856599s ago: executing program 1 (id=514): pipe2$9p(&(0x7f0000000240), 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 7m28.260614549s ago: executing program 1 (id=518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffff2836) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 7m27.880894458s ago: executing program 1 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 7m27.605876742s ago: executing program 1 (id=527): syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 7m27.120286356s ago: executing program 1 (id=532): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x0) 7m26.963192703s ago: executing program 33 (id=532): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x0) 5.540213145s ago: executing program 6 (id=4295): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.381662253s ago: executing program 6 (id=4297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r2, r2, 0x0) 5.072030149s ago: executing program 6 (id=4301): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, 0x0, 0x28) prlimit64(0x0, 0x3, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}}, 0x0) 3.583503802s ago: executing program 5 (id=4306): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.536203994s ago: executing program 6 (id=4307): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x64, 0x0, 0x2, 0x80, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7f}, @CTA_EXPECT_ZONE={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x8014}, 0x4040) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa000100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2b}}}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 3.408103781s ago: executing program 5 (id=4309): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 3.151098443s ago: executing program 5 (id=4311): openat$binfmt_register(0xffffffffffffff9c, &(0x7f000001ac80), 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 3.087983076s ago: executing program 6 (id=4313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.02030636s ago: executing program 5 (id=4314): timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {r2, r3+10000000}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) ioprio_set$uid(0x3, 0x0, 0x0) tkill(r5, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) 2.668078658s ago: executing program 6 (id=4317): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="0bffd5ece651e2a4648f9b08ce06626a8efcc3bee3ccef03f1e2279d8dc44bc4bd6a5d445b3f4f75b30ef3cc0a9d3c338a26ff996b57afbe65c46e61b66cf778b449292592952663ac34eb94f6fd4cfbda2af6c85c6e135955ca064c546ab638c56d2432e45e6d333181ee921f9f26a8ef"], 0x1, 0x305, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c600, 0x0, 0xbf, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000dc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1885cfe, 0x0, 0xf1, 0x0, &(0x7f00000000c0)) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) open(&(0x7f0000000240)='./bus\x00', 0x4440, 0x129) 2.135350564s ago: executing program 5 (id=4323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004040)="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", 0x2000, &(0x7f0000006900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) 2.041944318s ago: executing program 4 (id=4325): capset(0x0, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1002, 0x0) syz_open_dev$sg(0x0, 0x6f5e, 0x8001) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) socket$inet_udp(0x2, 0x2, 0x0) fchdir(r1) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 2.01875583s ago: executing program 0 (id=4326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r6, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) 1.832791729s ago: executing program 4 (id=4328): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) 1.670553487s ago: executing program 4 (id=4329): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) 1.494817456s ago: executing program 4 (id=4331): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000001800)="000751da", 0x4}, {&(0x7f0000001540)="02cb54", 0x3}], 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) 1.418287359s ago: executing program 0 (id=4332): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.261177958s ago: executing program 0 (id=4335): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 1.176145242s ago: executing program 4 (id=4336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000002cc0)=""/130, 0x82}, {&(0x7f0000002d80)=""/252, 0xfc}, {&(0x7f0000002e80)=""/34, 0x22}, {&(0x7f0000002ec0)=""/79, 0x4f}, {&(0x7f0000002f40)=""/102, 0x66}, {&(0x7f0000002fc0)=""/11, 0xb}, {&(0x7f0000003000)=""/247, 0xf7}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x8}, 0x4}], 0x1, 0x10022, 0x0) 1.126402574s ago: executing program 5 (id=4337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') 968.582992ms ago: executing program 2 (id=4338): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 723.186634ms ago: executing program 2 (id=4339): ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000004000000000000000000000000000029fc792c206d0880d5c4641ad77725fef3ebfc2ea3578ac4fc3fff2e5087a087a910e723ff0d7ddc43aa197de564cacef9dd933f58ead461738add013cd9c70ae30bc7b0aa4f536bab", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000280)=""/54, 0x36}], 0x2, 0x0, 0x0) 667.969127ms ago: executing program 4 (id=4340): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xf8, 0x1119, &(0x7f0000003600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = dup(r0) ftruncate(r3, 0x10008) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$dsp(r4, &(0x7f0000000240)=""/71, 0x47) pwrite64(r3, &(0x7f0000000080)="9d", 0x1, 0x14f4) 643.228998ms ago: executing program 0 (id=4341): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x401, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x9, 0xfff9}, {0x2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c000) ftruncate(r0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0xffffff53) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) writev(0xffffffffffffffff, 0x0, 0x0) 597.50984ms ago: executing program 2 (id=4342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60006a4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r1) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 328.315714ms ago: executing program 2 (id=4343): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 257.312957ms ago: executing program 2 (id=4344): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) 247.775507ms ago: executing program 0 (id=4345): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, &(0x7f0000000240)={[], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0x5}}, {@uid_gt={'uid>', r0}}, {@fowner_lt={'fowner<', 0xee01}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) unshare(0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 64.190967ms ago: executing program 2 (id=4346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) 0s ago: executing program 0 (id=4347): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ftruncate(0xffffffffffffffff, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000009, 0x204031, 0xffffffffffffffff, 0x42792000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) kernel console output (not intermixed with test programs): led=-22 [ 299.009542][ T4270] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 299.034045][ T4270] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 299.053147][ T4270] usb 7-1: media controller created [ 299.098575][ T4270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.160579][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1979'. [ 300.244337][T10020] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 300.279675][ T4270] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 300.305823][ T4270] zl10353_read_register: readreg error (reg=127, ret==-71) [ 300.340061][ T4270] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 300.480402][ T4270] usb 7-1: USB disconnect, device number 6 [ 302.760794][T10133] cgroup: fork rejected by pids controller in /syz0 [ 303.947612][ T128] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 304.140835][ T128] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.164131][ T128] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 304.215724][ T128] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.251607][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.275449][T10243] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 304.654675][ T128] usb 3-1: USB disconnect, device number 7 [ 304.694420][T10270] overlayfs: failed to clone upperpath [ 305.136230][T10287] overlayfs: failed to clone upperpath [ 305.828054][T10303] overlayfs: failed to clone upperpath [ 306.049740][T10289] overlayfs: failed to clone upperpath [ 306.060868][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 306.566459][T10326] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 306.613798][T10327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.629903][T10327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.660240][T10327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.669488][T10327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 306.681562][T10327] bond3: (slave geneve2): making interface the new active one [ 306.690745][T10327] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 306.700279][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 306.716635][T10330] bond3 (unregistering): (slave geneve2): Releasing active interface [ 306.727448][T10330] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 306.737239][T10330] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 306.746213][T10330] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 306.755720][T10330] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 306.772321][T10330] bond3 (unregistering): Released all slaves [ 307.225071][T10338] loop2: detected capacity change from 0 to 2048 [ 307.314272][T10338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 307.327127][T10338] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.379980][ T26] audit: type=1800 audit(1773929793.483:154): pid=10338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2046" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 307.383419][T10338] fs-verity: sha512 using implementation "sha512-avx2" [ 307.488709][T10338] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2046: bg 0: block 345: padding at end of block bitmap is not set [ 307.575921][T10338] fs-verity (loop2, inode 13): Error -117 writing Merkle tree block 0 [ 307.585525][T10338] fs-verity (loop2, inode 13): Error -117 building Merkle tree [ 307.656714][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2051'. [ 307.709955][ T9528] EXT4-fs (loop2): unmounting filesystem. [ 308.226096][T10359] loop2: detected capacity change from 0 to 40427 [ 308.239240][T10359] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 308.247391][T10359] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 308.256995][T10359] F2FS-fs (loop2): invalid crc value [ 308.309738][T10359] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.366544][T10359] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 308.373716][T10359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 308.639887][T10379] loop6: detected capacity change from 0 to 128 [ 308.791734][T10359] syz.2.2053: attempt to access beyond end of device [ 308.791734][T10359] loop2: rw=2049, sector=77824, nr_sectors = 2072 limit=40427 [ 308.867990][T10383] syz.6.2061: attempt to access beyond end of device [ 308.867990][T10383] loop6: rw=2049, sector=145, nr_sectors = 224 limit=128 [ 308.901288][T10359] syz.2.2053: attempt to access beyond end of device [ 308.901288][T10359] loop2: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 308.917538][T10359] syz.2.2053: attempt to access beyond end of device [ 308.917538][T10359] loop2: rw=0, sector=77832, nr_sectors = 8 limit=40427 [ 308.934774][T10359] syz.2.2053: attempt to access beyond end of device [ 308.934774][T10359] loop2: rw=0, sector=77832, nr_sectors = 8 limit=40427 [ 309.144186][T10391] overlayfs: failed to clone upperpath [ 309.703418][T10406] xt_hashlimit: size too large, truncated to 1048576 [ 311.408382][T10430] netlink: 'syz.5.2082': attribute type 4 has an invalid length. [ 311.726557][ T9438] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 311.916725][ T9438] usb 7-1: Using ep0 maxpacket: 32 [ 311.924022][ T9438] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.961611][ T9438] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 311.996398][ T9438] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.004548][ T9438] usb 7-1: Product: syz [ 312.032901][ T9438] usb 7-1: Manufacturer: syz [ 312.038857][ T9438] usb 7-1: SerialNumber: syz [ 312.069200][ T9438] usb 7-1: config 0 descriptor?? [ 312.077585][T10443] overlayfs: failed to clone upperpath [ 312.274648][T10448] overlayfs: failed to clone upperpath [ 312.281959][ T9438] usb 7-1: USB disconnect, device number 7 [ 313.368923][T10471] overlayfs: failed to clone upperpath [ 313.937309][T10466] loop6: detected capacity change from 0 to 40427 [ 314.007377][T10466] F2FS-fs (loop6): Found nat_bits in checkpoint [ 314.158004][T10466] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 314.925061][T10525] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 314.991106][T10523] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 317.620060][T10602] netlink: 'syz.4.2146': attribute type 4 has an invalid length. [ 317.679779][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.687634][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.746542][T10595] loop6: detected capacity change from 0 to 32768 [ 317.785740][T10595] XFS (loop6): Mounting V5 Filesystem [ 317.831575][T10595] XFS (loop6): Ending clean mount [ 318.276121][ T6112] XFS (loop6): Unmounting Filesystem [ 318.302784][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2149'. [ 319.560522][T10661] loop2: detected capacity change from 0 to 128 [ 319.612877][T10661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.640292][T10661] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.801482][ T9528] EXT4-fs (loop2): unmounting filesystem. [ 321.410835][ T4270] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 321.433071][ T4270] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.521361][T10720] loop6: detected capacity change from 0 to 4096 [ 321.550997][T10720] ext4: Unknown parameter 'fscontext' [ 322.051560][T10734] loop6: detected capacity change from 0 to 2048 [ 322.170072][T10734] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 322.235121][T10734] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.355751][ T26] audit: type=1800 audit(1773929808.453:155): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2194" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 322.377512][ T4320] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 322.411035][T10734] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2194: bg 0: block 345: padding at end of block bitmap is not set [ 322.493047][T10734] fs-verity (loop6, inode 13): Error -117 writing Merkle tree block 0 [ 322.503732][T10734] fs-verity (loop6, inode 13): Error -117 building Merkle tree [ 322.585447][ T6112] EXT4-fs (loop6): unmounting filesystem. [ 322.596790][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 322.612386][ T4320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 322.643349][ T4320] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 322.678907][ T4320] usb 3-1: can't read configurations, error -71 [ 323.651923][T10782] loop2: detected capacity change from 0 to 2048 [ 323.747503][T10785] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.656606][T10800] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.664500][T10800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.686529][T10800] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 324.716761][T10800] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 324.724648][T10800] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.738119][T10800] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 324.751266][T10800] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 325.180277][T10812] loop2: detected capacity change from 0 to 512 [ 325.223375][T10812] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 325.289524][T10812] EXT4-fs (loop2): 1 truncate cleaned up [ 325.295440][T10812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 325.613569][ T9528] EXT4-fs (loop2): unmounting filesystem. [ 325.876571][T10843] device macvlan2 entered promiscuous mode [ 325.883426][T10843] device bond5 entered promiscuous mode [ 325.890631][T10843] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 325.901393][T10843] device bond5 left promiscuous mode [ 326.249347][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 326.642731][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 326.716714][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.796599][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.466128][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 327.577274][T10909] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1617207373 (3234414746 ns) > initial count (443187862 ns). Using initial count to start timer. [ 327.774799][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2269'. [ 327.854704][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2269'. [ 327.945176][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2274'. [ 327.954752][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2274'. [ 328.358737][ T26] audit: type=1800 audit(1773929814.453:156): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2264" name="/" dev="fuse" ino=9 res=0 errno=0 [ 328.624758][T10956] netlink: 'syz.5.2283': attribute type 1 has an invalid length. [ 328.702274][T10956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.729667][T10956] bond2: (slave bond3): making interface the new active one [ 328.775911][T10956] bond2: (slave bond3): Enslaving as an active interface with an up link [ 328.796611][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 328.809287][T10964] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 328.886827][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 329.396366][ T9438] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 329.594117][ T9438] usb 7-1: config 0 has no interfaces? [ 329.602035][ T9438] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 329.626414][ T9438] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.644933][ T9438] usb 7-1: config 0 descriptor?? [ 329.975798][ T4320] usb 7-1: USB disconnect, device number 8 [ 331.688363][T11073] mmap: syz.0.2331 (11073) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 334.988759][T11111] overlayfs: failed to resolve './file0': -2 [ 335.175179][T11175] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2369'. [ 335.191130][T11175] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2369'. [ 335.214985][T11175] netlink: 'syz.5.2369': attribute type 6 has an invalid length. [ 335.237399][T11175] netlink: 'syz.5.2369': attribute type 5 has an invalid length. [ 335.246206][T11175] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2369'. [ 335.523755][T11191] loop6: detected capacity change from 0 to 512 [ 335.531406][T11191] EXT4-fs: Ignoring removed bh option [ 335.553612][T11191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e018, mo2=0003] [ 335.565466][T11191] System zones: 1-12 [ 335.574120][T11191] EXT4-fs (loop6): orphan cleanup on readonly fs [ 335.594011][T11191] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2376: invalid indirect mapped block 1819239214 (level 1) [ 335.634662][T11191] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2376: bg 0: block 361: padding at end of block bitmap is not set [ 335.652134][T11191] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 335.668403][T11191] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.2376: attempt to clear invalid blocks 33619980 len 1 [ 335.711989][T11191] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2376: invalid indirect mapped block 1819239214 (level 0) [ 335.730182][T11191] EXT4-fs (loop6): 1 truncate cleaned up [ 335.735998][T11191] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 335.760709][T11191] EXT4-fs: Ignoring removed orlov option [ 335.766818][T11191] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 335.776861][T11191] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 335.796456][T11191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802e11c, mo2=0003] [ 335.813206][T11191] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 335.970929][ T6112] EXT4-fs (loop6): unmounting filesystem. [ 336.276722][ T4282] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 337.779270][T11225] device vlan0 entered promiscuous mode [ 339.346552][ T4319] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 339.558254][ T4319] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.571975][ T4319] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.586911][ T4319] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.598052][ T4319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.615766][T11263] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 339.883955][ T9438] usb 7-1: USB disconnect, device number 9 [ 339.949670][T11283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2409'. [ 339.977803][T11283] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2409'. [ 340.028294][T11283] netlink: 'syz.4.2409': attribute type 6 has an invalid length. [ 340.053639][T11283] netlink: 'syz.4.2409': attribute type 5 has an invalid length. [ 340.083901][T11283] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2409'. [ 340.696901][T11302] overlayfs: failed to clone upperpath [ 340.902827][T11307] netlink: 'syz.5.2420': attribute type 6 has an invalid length. [ 341.203977][T11319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2425'. [ 341.465916][ T26] audit: type=1326 audit(2000000002.040:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 341.536398][ T26] audit: type=1326 audit(2000000002.040:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 341.572504][T11330] overlayfs: failed to clone upperpath [ 341.608263][ T26] audit: type=1326 audit(2000000002.050:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 341.691621][ T26] audit: type=1326 audit(2000000002.050:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 341.766360][ T26] audit: type=1326 audit(2000000002.070:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 341.851714][ T26] audit: type=1326 audit(2000000002.070:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 341.893629][T11343] overlayfs: failed to clone upperpath [ 341.916743][ T26] audit: type=1326 audit(2000000002.070:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 341.994194][ T26] audit: type=1326 audit(2000000002.070:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 342.046363][ T26] audit: type=1326 audit(2000000002.070:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 342.097910][ T26] audit: type=1326 audit(2000000002.070:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6275f9c42b code=0x7ffc0000 [ 342.519184][T11369] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2447'. [ 342.530952][T11369] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2447'. [ 342.543923][T11369] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2447'. [ 342.621045][T11371] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 342.642413][T11371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 342.663401][T11371] bond6: (slave bridge4): making interface the new active one [ 342.724367][T11371] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 342.749273][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 342.995675][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2455'. [ 344.325987][T11426] overlayfs: failed to clone upperpath [ 344.345282][T11426] overlayfs: failed to clone upperpath [ 344.559135][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2475'. [ 344.659455][T11436] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.678103][T11442] device bond7 entered promiscuous mode [ 344.750054][T11436] device dummy0 entered promiscuous mode [ 344.772560][T11436] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 345.095650][T11459] loop2: detected capacity change from 0 to 512 [ 345.125826][T11459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 345.195926][T11459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 345.260460][T11459] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2483: invalid indirect mapped block 9 (level 0) [ 345.337727][T11459] EXT4-fs (loop2): 1 truncate cleaned up [ 345.351078][T11445] device bond7 left promiscuous mode [ 345.354674][T11459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 345.356744][T11445] device dummy0 left promiscuous mode [ 345.372229][T11445] bond7 (unregistering): (slave dummy0): Releasing backup interface [ 345.397017][T11445] bond7 (unregistering): Released all slaves [ 345.433286][T11454] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2481'. [ 345.501800][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2481'. [ 345.662710][ T9528] EXT4-fs (loop2): unmounting filesystem. [ 345.685069][T11438] overlayfs: failed to clone upperpath [ 346.073692][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2d1800: rx timeout, send abort [ 346.573827][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2d3800: rx timeout, send abort [ 346.584461][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2d1800: abort rx timeout. Force session deactivation [ 346.701134][T11498] loop6: detected capacity change from 0 to 32768 [ 346.851387][T11498] JBD2: Ignoring recovery information on journal [ 346.961452][T11498] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 347.072761][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2d2800: rx timeout, send abort [ 347.082203][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e2d2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 347.130666][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e2d3800: abort rx timeout. Force session deactivation [ 347.211169][T11528] overlayfs: failed to clone upperpath [ 347.302191][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'. [ 347.585804][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'. [ 347.603042][T11542] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 347.712458][ T6112] ocfs2: Unmounting device (7,6) on (node local) [ 348.038859][T11556] loop2: detected capacity change from 0 to 512 [ 348.045927][T11556] EXT4-fs: Ignoring removed bh option [ 348.102371][T11556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e018, mo2=0003] [ 348.114210][T11556] System zones: 1-12 [ 348.119367][T11556] EXT4-fs (loop2): orphan cleanup on readonly fs [ 348.131208][T11556] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.2520: invalid block [ 348.149954][T11556] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2520: invalid indirect mapped block 1819239214 (level 1) [ 348.170074][T11556] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2520: bg 0: block 361: padding at end of block bitmap is not set [ 348.201352][T11556] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 348.210544][T11556] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2520: attempt to clear invalid blocks 33619980 len 1 [ 348.222934][T11566] loop6: detected capacity change from 0 to 512 [ 348.233543][T11556] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2520: invalid indirect mapped block 1819239214 (level 0) [ 348.251923][T11556] EXT4-fs (loop2): 1 truncate cleaned up [ 348.257748][T11556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 348.293331][T11556] EXT4-fs: Ignoring removed orlov option [ 348.299278][T11556] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 348.309477][T11556] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 348.319563][T11556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802e11c, mo2=0003] [ 348.333090][T11556] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 348.468846][ T9528] EXT4-fs (loop2): unmounting filesystem. [ 348.984581][T11591] MPTCP: kernel_bind error, err=-99 [ 350.436608][T11619] netlink: 'syz.5.2541': attribute type 10 has an invalid length. [ 350.476008][T11619] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 350.987306][T11637] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 351.101654][T11639] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 351.442638][T11653] netlink: 'syz.6.2554': attribute type 4 has an invalid length. [ 351.484683][T11653] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2554'. [ 351.511905][T11653] .`: renamed from bond0 [ 351.593440][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 351.593454][ T26] audit: type=1326 audit(2000000012.170:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 351.722260][ T26] audit: type=1326 audit(2000000012.210:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 351.885610][ T26] audit: type=1326 audit(2000000012.210:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 351.915023][ T26] audit: type=1326 audit(2000000012.210:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 351.951322][ T26] audit: type=1326 audit(2000000012.210:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 351.975771][ T26] audit: type=1326 audit(2000000012.210:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 352.092715][ T26] audit: type=1326 audit(2000000012.210:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 352.321922][ T26] audit: type=1326 audit(2000000012.210:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 352.383546][T11669] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 352.395598][ T26] audit: type=1326 audit(2000000012.210:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 352.461922][ T26] audit: type=1326 audit(2000000012.210:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3da419c799 code=0x7ffc0000 [ 353.434020][T11710] binder_alloc: 11708: binder_alloc_buf size 16777216 failed, no address space [ 353.446927][T11710] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 353.498182][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2576'. [ 355.392726][T11753] [ 355.751084][T11772] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2602'. [ 356.176374][ T4320] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 356.248077][T11793] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 356.248077][T11793] The task syz.4.2609 (11793) triggered the difference, watch for misbehavior. [ 356.327803][T11797] tipc: Failed to remove unknown binding: 66,0,0/0:909477152/909477153 [ 356.346939][T11797] tipc: Failed to remove unknown binding: 66,0,0/0:909477152/909477153 [ 356.370624][ T4320] usb 7-1: Using ep0 maxpacket: 32 [ 356.380134][ T4320] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 356.399762][ T4320] usb 7-1: config 0 has no interface number 0 [ 356.416165][ T4320] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 356.449058][ T4320] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 356.466582][ T4320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.478802][ T4320] usb 7-1: Product: syz [ 356.485727][ T4320] usb 7-1: Manufacturer: syz [ 356.490704][ T4320] usb 7-1: SerialNumber: syz [ 356.527037][ T4320] usb 7-1: config 0 descriptor?? [ 356.533839][T11778] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 356.547610][T11804] netlink: 'syz.5.2615': attribute type 4 has an invalid length. [ 356.555847][T11805] netlink: 'syz.5.2615': attribute type 4 has an invalid length. [ 356.758914][T11778] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 357.680623][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2630'. [ 357.771219][T11850] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 357.797198][T11850] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 357.820840][T11846] device macvlan2 entered promiscuous mode [ 357.827364][T11846] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 358.027523][T11856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.476558][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 358.615739][ T4320] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 358.640583][ T4320] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 358.670643][ T4320] asix: probe of 7-1:0.188 failed with error -71 [ 358.706650][ T4320] usb 7-1: USB disconnect, device number 10 [ 358.813879][T11890] loop2: detected capacity change from 0 to 2048 [ 358.891912][T11890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 359.102439][ T9528] EXT4-fs (loop2): unmounting filesystem. [ 359.235024][T11904] loop2: detected capacity change from 0 to 16 [ 359.263539][T11904] erofs: (device loop2): mounted with root inode @ nid 36. [ 359.287407][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 359.287421][ T26] audit: type=1800 audit(2000000019.870:223): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2648" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 359.642474][T11920] tipc: Failed to remove unknown binding: 66,1,1/0:2207057851/2207057853 [ 359.661015][T11920] tipc: Failed to remove unknown binding: 66,1,1/0:2207057851/2207057853 [ 359.676630][T11920] tipc: Failed to remove unknown binding: 66,1,1/0:2207057851/2207057853 [ 359.854600][T11923] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 360.543149][ T9437] libceph: connect (1)[c::]:6789 error -101 [ 360.554504][ T9437] libceph: mon0 (1)[c::]:6789 connect error [ 360.678373][T11949] ceph: No mds server is up or the cluster is laggy [ 360.686477][ T4320] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 360.893394][ T4320] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 360.917030][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.940226][ T4320] usb 7-1: config 0 descriptor?? [ 360.955904][ T4320] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 362.541096][T12014] blktrace: Concurrent blktraces are not allowed on loop0 [ 362.566493][ T4320] usb 7-1: USB disconnect, device number 11 [ 363.097987][T12029] x_tables: duplicate underflow at hook 2 [ 363.886662][T12045] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2700'. [ 365.580559][T12064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.629771][T12064] bond0: (slave bond3): Enslaving as an active interface with a down link [ 366.804227][ C1] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.170 [ 366.870948][T12112] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 366.874160][ T9437] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 366.955167][ T4536] bond2: (slave ip6gretap1): link status up again after 0 ms [ 366.969010][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.076575][ T9437] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 367.087107][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.096186][ T9437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.109438][ T9437] usb 3-1: config 0 descriptor?? [ 367.125285][ T9437] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 367.197409][T12123] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 367.254368][T12123] device bond8 entered promiscuous mode [ 367.262893][T12123] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.289975][T12123] device bridge5 entered promiscuous mode [ 367.304184][T12123] bond8: (slave bridge5): Enslaving as a backup interface with an up link [ 367.334644][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.354414][ T7506] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 367.375110][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 367.494066][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.544551][ T4300] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 367.613899][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.734074][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.854285][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.739157][ T9437] usb 3-1: USB disconnect, device number 10 [ 369.062526][T12161] device batadv_slave_0 entered promiscuous mode [ 369.128290][T12160] device batadv_slave_0 left promiscuous mode [ 369.596501][T12179] loop6: detected capacity change from 0 to 1024 [ 370.036271][T12192] netlink: 'syz.0.2758': attribute type 10 has an invalid length. [ 370.392601][ T9437] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 370.584343][ T9437] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 370.603176][ T9437] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.644732][ T9437] usb 7-1: config 0 descriptor?? [ 370.670538][ T9437] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 371.427345][T12217] netlink: 'syz.2.2769': attribute type 1 has an invalid length. [ 371.613610][T12223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.656736][T12223] bond3: (slave bond4): making interface the new active one [ 371.673746][T12223] bond3: (slave bond4): Enslaving as an active interface with an up link [ 371.718710][T12217] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 371.871915][ T11] net_ratelimit: 32 callbacks suppressed [ 371.871935][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.028181][T12228] device bond5 entered promiscuous mode [ 372.072502][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.202843][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.227738][T12237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 372.256856][T12241] netlink: 'syz.4.2773': attribute type 3 has an invalid length. [ 372.268155][T12241] netlink: 'syz.4.2773': attribute type 3 has an invalid length. [ 372.287290][ T9437] usb 7-1: USB disconnect, device number 12 [ 372.322862][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.461485][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.591401][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.677294][ T4270] libceph: connect (1)[c::]:6789 error -101 [ 372.685622][ T4270] libceph: mon0 (1)[c::]:6789 connect error [ 372.701646][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.797825][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 372.819916][T12257] ceph: No mds server is up or the cluster is laggy [ 372.827281][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.941172][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 372.965393][ T4270] libceph: connect (1)[c::]:6789 error -101 [ 372.978109][ T4270] libceph: mon0 (1)[c::]:6789 connect error [ 373.098789][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 373.284520][T12282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 373.809137][ T4270] libceph: connect (1)[c::]:6789 error -22 [ 373.817105][ T4270] libceph: mon0 (1)[c::]:6789 connect error [ 373.961424][T12312] ceph: No mds server is up or the cluster is laggy [ 374.507962][T12337] tipc: Failed to remove unknown binding: 66,1,1/0:877561998/877562000 [ 374.559474][T12337] tipc: Failed to remove unknown binding: 66,1,1/0:877561998/877562000 [ 374.595019][T12337] tipc: Failed to remove unknown binding: 66,1,1/0:877561998/877562000 [ 374.738452][T12343] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2809'. [ 374.990367][ T4300] bond8: (slave bridge5): link status up again after 0 ms [ 375.082214][ T4300] bond4: (slave ip6gretap1): link status up again after 0 ms [ 375.243726][T12358] overlayfs: failed to clone upperpath [ 376.076072][ T4285] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 376.953237][ T4533] net_ratelimit: 60 callbacks suppressed [ 376.953258][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 377.019160][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 377.039125][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.109888][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 377.159014][ T4300] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 377.190807][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.248988][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 377.281384][ T4300] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 377.369127][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.419058][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 379.109809][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.116260][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.208155][ T4270] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 379.398124][ T4270] usb 3-1: Using ep0 maxpacket: 8 [ 379.412888][ T4270] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 379.437909][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.470126][ T4270] usb 3-1: Product: syz [ 379.474360][ T4270] usb 3-1: Manufacturer: syz [ 379.489559][ T4270] usb 3-1: SerialNumber: syz [ 379.526100][ T4270] usb 3-1: config 0 descriptor?? [ 379.736182][ T4270] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 380.578126][ T4270] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 380.597333][ T4270] usb 3-1: USB disconnect, device number 11 [ 380.790856][T12491] netlink: 1272 bytes leftover after parsing attributes in process `syz.4.2869'. [ 380.864125][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2870'. [ 381.401592][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2876'. [ 381.416724][T12508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.428002][T12508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.436021][T12508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.683051][T12513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2877'. [ 381.977123][ T5180] net_ratelimit: 117 callbacks suppressed [ 381.977142][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 382.006742][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.036737][ T4300] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 382.107560][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 382.126571][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.148635][ T7512] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 382.217526][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 382.236543][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.278304][ T4300] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 382.337173][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 382.617167][T12543] x_tables: duplicate underflow at hook 2 [ 384.177372][T12600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2915'. [ 384.303306][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 384.421892][T12611] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2918'. [ 384.477901][T12611] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2918'. [ 385.160976][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'. [ 385.376037][ T4533] bond4: (slave ip6gretap1): link status up again after 0 ms [ 385.444907][ T7517] bond4: (slave ip6gretap1): link status up again after 0 ms [ 385.494915][ T4300] bond4: (slave ip6gretap1): link status up again after 0 ms [ 385.524970][ T7517] bond4: (slave ip6gretap1): link status up again after 0 ms [ 385.564991][ T4300] bond4: (slave ip6gretap1): link status up again after 0 ms [ 385.574881][ T7512] bond8: (slave bridge5): link status up again after 0 ms [ 385.595758][ T5180] bond8: (slave bridge5): link status up again after 0 ms [ 385.612494][T12645] netlink: 'syz.6.2929': attribute type 6 has an invalid length. [ 385.625760][ T7517] bond4: (slave ip6gretap1): link status up again after 0 ms [ 385.635134][ T5180] bond8: (slave bridge5): link status up again after 0 ms [ 385.654496][ T7512] bond4: (slave ip6gretap1): link status up again after 0 ms [ 385.655783][T12646] netlink: 'syz.6.2929': attribute type 6 has an invalid length. [ 385.663280][ T5180] bond8: (slave bridge5): link status up again after 0 ms [ 385.704754][ T7512] bond4: (slave ip6gretap1): link status up again after 0 ms [ 386.827979][T12684] netlink: 'syz.2.2944': attribute type 4 has an invalid length. [ 386.838654][T12684] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2944'. [ 387.015372][ T5180] net_ratelimit: 102 callbacks suppressed [ 387.015397][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 387.044272][ T7525] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.075157][ T7512] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 387.134853][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 387.155143][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.204152][ T26] audit: type=1326 audit(2000000047.794:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.2.2949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f392459c799 code=0x0 [ 387.226889][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 387.264401][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 387.284143][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 387.344684][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 387.374205][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 388.071085][T12721] netlink: 'syz.5.2960': attribute type 4 has an invalid length. [ 388.093730][T12721] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2960'. [ 390.226124][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 390.256954][T12760] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 390.720340][T12771] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 390.930405][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 391.232407][T12780] loop6: detected capacity change from 0 to 40427 [ 391.250363][T12780] F2FS-fs (loop6): invalid crc value [ 391.257654][T12780] F2FS-fs (loop6): Found nat_bits in checkpoint [ 391.294930][T12780] F2FS-fs (loop6): Start checkpoint disabled! [ 391.306978][T12780] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 392.088396][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2994'. [ 392.352535][ T7512] net_ratelimit: 113 callbacks suppressed [ 392.352555][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 392.433018][ T7525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 392.457117][ T7525] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 392.521427][ T7525] bond8: (slave bridge5): failed to get link speed/duplex [ 392.551775][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 392.592132][ T7525] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 392.642352][ T7525] bond8: (slave bridge5): failed to get link speed/duplex [ 392.654587][T12814] loop6: detected capacity change from 0 to 4096 [ 392.672132][ T9] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 392.684041][T12814] EXT4-fs: inline encryption not supported [ 392.704720][T12814] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 392.717430][T12814] System zones: 0-5 [ 392.731358][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 392.739273][T12814] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 392.751847][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 392.910422][T12823] EXT4-fs error (device loop6): ext4_validate_inode_bitmap:106: comm syz.6.2997: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3 [ 393.667207][T12831] netlink: 'syz.4.3001': attribute type 10 has an invalid length. [ 393.721186][T12831] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 393.794891][ T6112] EXT4-fs (loop6): unmounting filesystem. [ 394.017556][T12843] netlink: 'syz.0.3005': attribute type 4 has an invalid length. [ 394.033958][T12846] overlayfs: failed to clone upperpath [ 394.052945][T12843] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3005'. [ 394.072528][T12843] .`: renamed from bond0 [ 394.378567][ T26] audit: type=1326 audit(2000000054.967:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.2.3003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f392459c799 code=0x0 [ 394.746485][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3015'. [ 395.503790][T12887] netlink: 'syz.5.3019': attribute type 10 has an invalid length. [ 395.541296][T12885] netlink: 'syz.0.3018': attribute type 10 has an invalid length. [ 395.585268][T12885] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 396.448948][T12900] netlink: 'syz.4.3022': attribute type 4 has an invalid length. [ 396.479853][T12900] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3022'. [ 396.913557][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3036'. [ 397.410590][ T7506] net_ratelimit: 112 callbacks suppressed [ 397.410611][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 397.448662][ T9] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 397.464499][T12944] overlayfs: failed to clone upperpath [ 397.470899][ T9] bond8: (slave bridge5): failed to get link speed/duplex [ 397.538951][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 397.570001][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 397.609465][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 397.659889][ T9] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 397.699005][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 397.738992][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 397.798870][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 398.041304][T12963] netlink: 'syz.6.3058': attribute type 10 has an invalid length. [ 398.080754][T12963] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 400.000769][ T4285] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 401.666755][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 402.426517][ T5285] net_ratelimit: 122 callbacks suppressed [ 402.426538][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 402.486576][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 402.517425][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 402.566355][ T7519] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 402.600136][ T7512] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 402.627417][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 402.677279][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 402.727331][ T9] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 402.749425][ T4536] bond8: (slave bridge5): failed to get link speed/duplex [ 402.806242][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 404.243024][T13134] overlayfs: failed to clone upperpath [ 404.388754][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'. [ 404.731142][T13144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3113'. [ 404.755439][ T7519] bond4: (slave ip6gretap1): link status up again after 0 ms [ 404.765325][ T4536] bond8: (slave bridge5): link status up again after 0 ms [ 405.404323][T13155] overlayfs: failed to clone upperpath [ 406.628750][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3133'. [ 406.672758][T13200] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.684997][T13200] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 406.723744][T13206] device macvlan2 entered promiscuous mode [ 406.764580][T13206] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 407.200128][T13230] netlink: 'syz.2.3139': attribute type 10 has an invalid length. [ 407.248420][T13230] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 407.534592][ T7519] net_ratelimit: 123 callbacks suppressed [ 407.534612][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 407.565040][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 407.572677][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 407.617637][T13251] kvm: pic: non byte read [ 407.622337][T13251] kvm: pic: non byte read [ 407.627574][T13251] kvm: pic: non byte read [ 407.632153][T13251] kvm: pic: non byte read [ 407.638424][T13251] kvm: pic: non byte read [ 407.643020][T13251] kvm: pic: non byte read [ 407.649186][T13251] kvm: pic: non byte read [ 407.655319][T13251] kvm: pic: non byte read [ 407.655579][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 407.660634][T13251] kvm: pic: non byte read [ 407.672811][T13251] kvm: pic: non byte read [ 407.693787][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 407.701492][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 407.719530][T13255] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3151'. [ 407.736888][T13255] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3151'. [ 407.794830][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 407.804628][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 407.825275][ T7519] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 407.904737][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 408.013005][T13264] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.039216][T13268] netlink: 'syz.0.3156': attribute type 10 has an invalid length. [ 408.059687][T13268] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 408.147117][T13264] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.245619][T13264] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.424620][T13264] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.481253][T13281] 8021q: adding VLAN 0 to HW filter on device bond11 [ 408.501185][T13281] bond10: (slave bond11): Enslaving as an active interface with a down link [ 408.703001][T13264] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.782533][T13264] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.838443][T13264] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.883705][T13264] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.442617][ T4270] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 410.570388][ T4285] Bluetooth: hci2: unexpected event 0x3e length: 263 > 260 [ 410.570445][ T4285] Bluetooth: hci2: unexpected subevent 0x0d length: 262 > 260 [ 410.592404][ T4285] Bluetooth: hci2: adv larger than maximum supported [ 410.592493][ T4285] Bluetooth: hci2: adv larger than maximum supported [ 410.649222][ T4270] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.713415][ T4270] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 410.785511][ T4270] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.841743][ T4270] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.872147][ T4270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.885800][ T4270] usb 7-1: Product: syz [ 410.890455][ T4270] usb 7-1: Manufacturer: syz [ 410.905528][ T4270] usb 7-1: SerialNumber: syz [ 410.930602][ T4270] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 410.950719][ T4270] cdc_ncm 7-1:1.0: bind() failure [ 411.173808][ T4270] usb 7-1: USB disconnect, device number 13 [ 413.019213][ T7512] net_ratelimit: 109 callbacks suppressed [ 413.019234][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 413.121273][ T9] bond8: (slave bridge5): failed to get link speed/duplex [ 413.157600][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 413.223090][ T9] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 413.241969][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 413.292094][ T4533] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 413.343112][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 413.361005][ T9] bond8: (slave bridge5): failed to get link speed/duplex [ 413.461932][ T9] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 413.492496][ T9] bond8: (slave bridge5): failed to get link speed/duplex [ 413.630457][T13419] netlink: 'syz.0.3209': attribute type 4 has an invalid length. [ 413.669268][T13419] netlink: 'syz.0.3209': attribute type 4 has an invalid length. [ 414.981001][T13457] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 415.019745][T13460] device batadv_slave_0 entered promiscuous mode [ 415.029519][T13457] device bond12 entered promiscuous mode [ 415.039755][T13457] 8021q: adding VLAN 0 to HW filter on device bond12 [ 415.071763][T13457] 8021q: adding VLAN 0 to HW filter on device bond13 [ 415.080506][T13457] device bond13 entered promiscuous mode [ 415.087504][T13457] bond12: (slave bond13): Enslaving as a backup interface with a down link [ 415.163804][T13458] device batadv_slave_0 left promiscuous mode [ 415.203562][T13468] netlink: 'syz.5.3227': attribute type 1 has an invalid length. [ 415.294182][T13471] device bond5 entered promiscuous mode [ 415.316233][T13471] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.341838][T13468] device bridge4 entered promiscuous mode [ 415.348662][T13468] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 415.434250][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 415.728914][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3241'. [ 415.755282][T13496] 8021q: adding VLAN 0 to HW filter on device bond6 [ 415.774856][T13496] device bond6 entered promiscuous mode [ 415.785188][T13496] device dummy0 entered promiscuous mode [ 415.793174][T13496] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 415.855507][ T26] audit: type=1326 audit(2000000076.448:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 415.919967][ T26] audit: type=1326 audit(2000000076.458:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 415.960599][ T4270] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 415.982071][ T26] audit: type=1326 audit(2000000076.458:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 416.072728][ T26] audit: type=1326 audit(2000000076.478:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 416.098078][ T26] audit: type=1326 audit(2000000076.478:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 416.174836][ T26] audit: type=1326 audit(2000000076.488:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 416.199293][ T4270] usb 7-1: Using ep0 maxpacket: 8 [ 416.217111][ T4270] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 416.238354][ T4270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.256888][ T26] audit: type=1326 audit(2000000076.488:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 416.287534][ T4270] usb 7-1: Product: syz [ 416.307296][ T4270] usb 7-1: Manufacturer: syz [ 416.320208][ T4270] usb 7-1: SerialNumber: syz [ 416.364109][ T4270] usb 7-1: config 0 descriptor?? [ 416.383196][ T26] audit: type=1326 audit(2000000076.488:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 416.508993][ T26] audit: type=1326 audit(2000000076.488:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 416.581983][ T26] audit: type=1326 audit(2000000076.488:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.4.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 416.615202][ T4270] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 416.644482][T13496] device bond6 left promiscuous mode [ 416.654455][T13496] device dummy0 left promiscuous mode [ 416.666502][T13496] bond6 (unregistering): (slave dummy0): Releasing backup interface [ 416.720080][T13496] bond6 (unregistering): Released all slaves [ 417.380640][T13545] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3256'. [ 418.110562][ T9] net_ratelimit: 93 callbacks suppressed [ 418.110581][ T9] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 418.149487][ T9] bond8: (slave bridge5): failed to get link speed/duplex [ 418.179476][ T9] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 418.250458][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 418.289009][ T9] bond8: (slave bridge5): failed to get link speed/duplex [ 418.351611][ T9] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 418.378390][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 418.433263][ T4270] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 418.448390][ T9] bond8: (slave bridge5): failed to get link speed/duplex [ 418.454163][ T4270] usb 7-1: USB disconnect, device number 14 [ 418.488549][ T9] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 418.508590][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 418.554315][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3266'. [ 418.631248][T13578] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.620055][T13626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.711759][T13626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.813608][T13626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.312454][T13652] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 423.032146][T13672] loop2: detected capacity change from 0 to 32768 [ 423.117179][ T4536] net_ratelimit: 97 callbacks suppressed [ 423.117204][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.159877][T13672] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.3299 (13672) [ 423.196348][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 423.216095][ T4536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 423.386133][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.409965][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 423.432417][T13672] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 423.446428][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 423.494652][T13672] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 423.515881][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.531911][T13672] BTRFS info (device loop2): setting nodatacow, compression disabled [ 423.535853][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 423.549391][T13672] BTRFS info (device loop2): turning on flush-on-commit [ 423.573647][T13672] BTRFS info (device loop2): using free space tree [ 423.595957][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 423.635975][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.838340][T13672] BTRFS info (device loop2): enabling ssd optimizations [ 424.191520][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 424.191535][ T26] audit: type=1800 audit(2000000084.792:246): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3299" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 424.723910][ T9528] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 424.821978][T13741] device ip6gretap1 entered promiscuous mode [ 424.828547][T13741] bond6: (slave ip6gretap1): no link monitoring support [ 424.837319][T13741] bond6: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 424.861186][T13741] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 424.971545][T13747] loop6: detected capacity change from 0 to 128 [ 425.050874][T13747] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 425.115169][T13756] tipc: Cannot configure node identity twice [ 425.275298][T13747] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 426.040092][ T9] bond0: (slave netdevsim0): Releasing backup interface [ 426.561632][T13778] loop6: detected capacity change from 0 to 32768 [ 426.634850][T13778] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 scanned by syz.6.3331 (13778) [ 426.712730][T13778] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 426.757160][T13778] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 426.792175][T13778] BTRFS info (device loop6): setting nodatacow, compression disabled [ 426.811882][T13778] BTRFS info (device loop6): turning on flush-on-commit [ 426.850612][T13778] BTRFS info (device loop6): using free space tree [ 427.140428][T13826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3342'. [ 427.156308][T13826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3342'. [ 427.374316][T13778] BTRFS info (device loop6): enabling ssd optimizations [ 427.394688][T13842] overlayfs: failed to clone upperpath [ 427.429031][T13846] x_tables: unsorted underflow at hook 3 [ 428.061221][T13859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3349'. [ 428.187283][T13863] Invalid argument reading file caps for ./file0 [ 428.289640][T13867] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 428.464318][ T4533] net_ratelimit: 66 callbacks suppressed [ 428.464337][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 428.482733][ T6112] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 429.250888][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 429.774246][ T7525] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 429.823677][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 429.842741][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.182664][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 430.214194][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.310020][ T9] device hsr_slave_0 left promiscuous mode [ 430.318005][ T9] device hsr_slave_1 left promiscuous mode [ 430.353072][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.360702][T13925] overlayfs: failed to clone upperpath [ 430.440681][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.461689][ T9] device bridge_slave_1 left promiscuous mode [ 430.496889][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.533026][ T9] device bridge_slave_0 left promiscuous mode [ 430.580415][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.782737][ T9] bond0 (unregistering): Released all slaves [ 431.681826][ T9] team0 (unregistering): Port device team_slave_1 removed [ 431.760434][ T9] team0 (unregistering): Port device team_slave_0 removed [ 432.606362][T13933] netlink: 'syz.0.3368': attribute type 11 has an invalid length. [ 432.631806][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 432.639114][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 432.679041][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 432.927779][T13953] use of bytesused == 0 is deprecated and will be removed in the future, [ 432.941100][T13953] use the actual size instead. [ 433.155308][T13958] overlayfs: failed to clone upperpath [ 433.471453][ T7519] net_ratelimit: 19 callbacks suppressed [ 433.471471][ T7519] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 433.570913][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 433.578359][ T4533] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 433.670986][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 433.713635][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 433.803479][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 433.888862][ T4536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 433.935902][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 434.041911][ T7512] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 434.120837][ T7525] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 434.947268][ T26] audit: type=1326 audit(2000000095.558:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f026339c799 code=0x0 [ 435.238156][T14003] binder: 14002:14003 ioctl c0306201 2000000003c0 returned -14 [ 435.409317][T14010] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3391'. [ 436.108673][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3393'. [ 436.244691][T14026] overlayfs: failed to clone upperpath [ 436.391608][T14024] process 'newroot/720/bus/file0' started with executable stack [ 438.177211][T14082] md: md2 stopped. [ 439.034165][ T4300] net_ratelimit: 115 callbacks suppressed [ 439.034181][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 439.108650][ T9] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 439.142281][ T9] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 439.224993][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 439.290884][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 439.338877][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 439.368000][ T46] bond8: (slave bridge5): failed to get link speed/duplex [ 439.378636][ C0] dccp_v6_rcv: dropped packet with invalid checksum [ 439.431497][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 439.467894][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 440.395348][T14132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.519678][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.526052][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.556471][T14139] loop6: detected capacity change from 0 to 128 [ 440.588947][T14139] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 440.670620][T14139] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 440.736247][T14139] ext2 filesystem being mounted at /462/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.307035][ T6112] EXT4-fs (loop6): unmounting filesystem. [ 444.114589][ T46] net_ratelimit: 109 callbacks suppressed [ 444.114609][ T46] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 444.215649][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 444.235771][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 444.252641][T14245] loop2: detected capacity change from 0 to 256 [ 444.565662][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 444.585341][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 444.605395][ T46] bond8: (slave bridge5): failed to get link speed/duplex [ 444.676433][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 444.705182][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 444.736277][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 444.786160][ T46] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 445.746951][T14277] loop2: detected capacity change from 0 to 256 [ 445.827313][T14277] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 446.643145][T14277] exFAT-fs (loop2): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 446.751646][T14277] exFAT-fs (loop2): Filesystem has been set read-only [ 446.936110][T14312] device bridge0 entered promiscuous mode [ 446.977996][T14315] vivid-007: disconnect [ 447.029827][T14314] vivid-007: reconnect [ 447.518471][T14336] binder_alloc: 14334: binder_alloc_buf size 16777216 failed, no address space [ 447.574645][T14336] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 447.830657][T14348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3479'. [ 447.907125][T14352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3481'. [ 447.972494][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3479'. [ 449.172960][ T7521] net_ratelimit: 97 callbacks suppressed [ 449.172980][ T7521] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 449.194103][ T7521] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 449.213644][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 449.293279][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 449.333666][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 449.362489][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 449.433058][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 449.453258][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 449.493023][ T7521] bond8: (slave bridge5): failed to get link speed/duplex [ 449.554410][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 451.004511][T14453] 9pnet: p9_errstr2errno: server reported unknown error @®ï©?ã‹Òêß¾¡IÃ퉲rŠ ò6óÒ~º“D‡ómáÊ„!\ [ 451.920729][T14486] bond0 (unregistering): Released all slaves [ 453.685263][T14531] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3526'. [ 454.217089][ T7521] net_ratelimit: 117 callbacks suppressed [ 454.217106][ T7521] bond8: (slave bridge5): failed to get link speed/duplex [ 454.291786][ T7521] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 454.733423][ T7521] bond8: (slave bridge5): failed to get link speed/duplex [ 454.820378][ T7521] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 455.050130][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 455.120107][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 455.140120][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 455.294526][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 455.909218][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 456.060204][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 458.098052][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3553'. [ 458.472054][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3558'. [ 458.492491][T14643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3558'. [ 458.651356][T14649] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3559'. [ 458.685181][T14649] device ip6gre1 entered promiscuous mode [ 458.797086][T14659] netlink: 'syz.6.3559': attribute type 6 has an invalid length. [ 458.821497][T14659] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3559'. [ 459.091379][T14667] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 459.109472][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3564'. [ 460.017704][ T11] net_ratelimit: 70 callbacks suppressed [ 460.017722][ T11] bond8: (slave bridge5): failed to get link speed/duplex [ 460.113510][T14684] loop2: detected capacity change from 0 to 512 [ 460.119923][ T7521] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 460.148006][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 460.185631][T14684] EXT4-fs: Ignoring removed oldalloc option [ 460.227636][T14684] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 460.230975][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 460.267633][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 460.280906][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 460.310731][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3572'. [ 460.324301][T14684] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 460.338267][T14695] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.338354][T14695] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.338383][T14695] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.365388][T14695] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.375976][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 460.384436][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3572'. [ 460.431389][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 460.477613][T14684] EXT4-fs (loop2): 1 truncate cleaned up [ 460.483521][T14684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 460.507492][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 460.528406][ T7521] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 460.607797][ T9] bond8: (slave bridge5): failed to get link speed/duplex [ 461.276248][ T9528] EXT4-fs (loop2): unmounting filesystem. [ 461.285984][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3577'. [ 461.326999][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3577'. [ 462.788781][T14770] device veth1 entered promiscuous mode [ 465.616100][T14770] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.634881][T14770] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.644000][T14770] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.656136][T14770] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.862070][T14810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3608'. [ 465.964722][ T7530] net_ratelimit: 53 callbacks suppressed [ 465.964743][ T7530] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 466.019468][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 466.046362][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 466.115660][ T7530] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 466.144805][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 466.184633][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 466.235139][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 466.275309][ T7512] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 466.304406][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 466.344529][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 469.187704][T14903] netlink: 'syz.0.3630': attribute type 32 has an invalid length. [ 469.197900][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3630'. [ 469.210885][T14903] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 469.752365][T14928] tmpfs: Bad value for 'nr_blocks' [ 470.867496][T14963] device vxcan1 entered promiscuous mode [ 470.978813][ T26] audit: type=1326 audit(2000000131.606:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.6.3641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61a959c799 code=0x0 [ 471.073563][ T7523] net_ratelimit: 123 callbacks suppressed [ 471.073584][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.102166][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 471.116514][T14973] netlink: 'syz.0.3642': attribute type 29 has an invalid length. [ 471.123248][ T7523] bond8: (slave bridge5): failed to get link speed/duplex [ 471.150858][T14975] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 471.151591][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 471.203621][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.218725][T14973] netlink: 'syz.0.3642': attribute type 29 has an invalid length. [ 471.255791][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 471.281982][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 471.302043][ T7519] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 471.312279][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.391848][ T7523] bond8: (slave bridge5): failed to get link speed/duplex [ 471.412629][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 472.341587][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 472.962772][T15023] loop2: detected capacity change from 0 to 4096 [ 473.018199][T15023] EXT4-fs (loop2): Test dummy encryption mode enabled [ 473.059034][T15023] EXT4-fs (loop2): first meta block group too large: 4177526784 (group descriptor block count 1) [ 473.764023][T15040] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 473.847862][T15042] netlink: 'syz.0.3665': attribute type 1 has an invalid length. [ 473.880069][T15042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.899166][T15042] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 473.927141][T15042] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 474.726141][T15063] infiniband syz1: set down [ 474.731602][T15063] infiniband syz1: added ipvlan0 [ 474.851081][T15063] RDS/IB: syz1: added [ 474.866902][T15063] smc: adding ib device syz1 with port count 1 [ 474.890065][T15063] smc: ib device syz1 port 1 has pnetid [ 474.920795][T13760] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 475.122097][T13760] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 475.243333][T13760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.019283][T13760] usb 3-1: config 0 descriptor?? [ 476.082401][T13760] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 476.141709][ T7523] net_ratelimit: 104 callbacks suppressed [ 476.141730][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 476.220758][ T7523] bond8: (slave bridge5): failed to get link speed/duplex [ 476.241878][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 476.311824][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 476.360927][ T4536] bond8: (slave bridge5): failed to get link speed/duplex [ 476.381965][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 476.461727][ T4536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 476.501592][ T4536] bond8: (slave bridge5): failed to get link speed/duplex [ 476.561960][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 476.601063][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 477.296400][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3687'. [ 477.791409][T13760] gspca_stv06xx: I2C: Read error writing address: -71 [ 477.800441][T13760] usb 3-1: USB disconnect, device number 12 [ 480.040931][T15162] block device autoloading is deprecated and will be removed. [ 480.057999][T15173] block device autoloading is deprecated and will be removed. [ 480.804937][ T128] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 480.987013][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3716'. [ 480.993390][ T128] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 481.021532][ T128] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 481.048844][ T128] usb 7-1: config 1 interface 0 has no altsetting 0 [ 481.056184][T15213] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 481.068537][ T128] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 481.088100][ T128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.108270][ T128] usb 7-1: Product: syz [ 481.118370][ T128] usb 7-1: Manufacturer: syz [ 481.124087][ T128] usb 7-1: SerialNumber: syz [ 481.142503][T15199] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 481.151979][ T7512] net_ratelimit: 111 callbacks suppressed [ 481.151998][ T7512] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 481.152241][T15199] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 481.180997][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 481.200786][ T11] bond8: (slave bridge5): failed to get link speed/duplex [ 481.260999][ T7512] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 481.290892][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 481.314532][ T11] bond8: (slave bridge5): failed to get link speed/duplex [ 481.325632][T15220] lo: Caught tx_queue_len zero misconfig [ 481.390805][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 481.403774][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 481.731769][ T7525] bond8: (slave bridge5): failed to get link speed/duplex [ 481.752089][ T46] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 482.288190][ T26] audit: type=1326 audit(2000000398.919:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15232 comm="syz.5.3722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3da419c799 code=0x0 [ 482.413483][ T128] rtl8150 7-1:1.0: couldn't reset the device [ 482.419805][ T128] rtl8150: probe of 7-1:1.0 failed with error -5 [ 482.448584][T15241] overlayfs: failed to clone upperpath [ 482.467083][ T128] usb 7-1: USB disconnect, device number 15 [ 483.209158][T15256] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3729'. [ 483.298287][T15257] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 483.528198][T15261] kvm: pic: level sensitive irq not supported [ 483.528364][T15261] picdev_read: 77 callbacks suppressed [ 483.528378][T15261] kvm: pic: non byte read [ 483.557438][T15261] kvm: pic: non byte read [ 484.654515][ T26] audit: type=1326 audit(2000000401.289:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.0.3741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f026339c799 code=0x0 [ 484.920945][T13760] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 485.127025][T13760] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.153711][T13760] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.170532][T13760] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 485.188132][T13760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.204167][T13760] usb 7-1: config 0 descriptor?? [ 485.214242][T15302] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3746'. [ 485.261616][T15302] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 485.285743][T15300] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 485.296184][T15303] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3746'. [ 485.314069][T15303] bond7: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 486.222262][ T7527] net_ratelimit: 112 callbacks suppressed [ 486.222283][ T7527] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 486.267688][ T7527] bond8: (slave bridge5): failed to get link speed/duplex [ 486.281966][ T7527] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 486.373231][ T7527] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 486.411769][ T7527] bond8: (slave bridge5): failed to get link speed/duplex [ 486.451955][ T7527] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 486.507317][ T7527] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 486.540821][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 486.621654][ T7527] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 486.641926][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 487.669440][ T128] usb 7-1: USB disconnect, device number 16 [ 487.777969][T15338] rdma_rxe: rxe_register_device failed with error -23 [ 487.789714][T15338] rdma_rxe: failed to add ipvlan0 [ 489.104328][T15380] loop6: detected capacity change from 0 to 512 [ 489.138724][T15380] EXT4-fs: Ignoring removed i_version option [ 489.158613][T15380] EXT4-fs: Ignoring removed oldalloc option [ 489.206540][T15380] EXT4-fs (loop6): Test dummy encryption mode enabled [ 489.256919][T15380] EXT4-fs (loop6): 1 truncate cleaned up [ 489.270772][T15380] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 489.917658][ T6112] EXT4-fs (loop6): unmounting filesystem. [ 491.230840][ T46] net_ratelimit: 107 callbacks suppressed [ 491.230861][ T46] bond8: (slave bridge5): failed to get link speed/duplex [ 491.301257][ T7527] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 491.331801][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 491.401106][ T7527] bond8: (slave bridge5): failed to get link speed/duplex [ 491.417483][ T7527] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 491.471481][ T7527] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 491.511714][ T7527] bond8: (slave bridge5): failed to get link speed/duplex [ 491.561851][ T11] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 491.581609][ T7527] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 491.653218][ T7527] bond8: (slave bridge5): failed to get link speed/duplex [ 491.838001][T15451] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3805'. [ 491.898059][T15451] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 492.046941][T15456] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3805'. [ 492.100827][T15456] bond4: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 493.028238][T15471] netlink: 'syz.4.3797': attribute type 8 has an invalid length. [ 494.043212][T15485] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3799'. [ 496.387750][ T46] net_ratelimit: 97 callbacks suppressed [ 496.387769][ T46] bond8: (slave bridge5): failed to get link speed/duplex [ 496.767971][ T7527] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 496.897843][ T7527] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 496.923221][ T7527] bond8: (slave bridge5): failed to get link speed/duplex [ 496.980897][ T4533] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.030690][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 497.061819][ T7527] bond8: (slave bridge5): failed to get link speed/duplex [ 497.101026][ T46] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.141969][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 497.171032][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 501.390885][ T4300] net_ratelimit: 96 callbacks suppressed [ 501.390951][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.511247][ T7525] bond8: (slave bridge5): failed to get link speed/duplex [ 501.551959][ T7525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 501.619858][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.691802][ T4536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 501.711706][ T7525] bond8: (slave bridge5): failed to get link speed/duplex [ 501.781796][ T7525] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.811390][ T7525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 501.867081][ T4536] bond8: (slave bridge5): failed to get link speed/duplex [ 501.891187][T15603] netlink: 'syz.5.3837': attribute type 8 has an invalid length. [ 501.921808][ T7525] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.942901][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.949633][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.457611][T15662] netlink: 'syz.0.3856': attribute type 8 has an invalid length. [ 506.353871][T15661] tipc: Started in network mode [ 506.365061][T15661] tipc: Node identity 0101010101010101, cluster identity 4711 [ 506.384952][T15661] tipc: Enabling of bearer rejected, failed to enable media [ 506.421157][ T7530] net_ratelimit: 116 callbacks suppressed [ 506.422589][ T7530] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 506.460783][ T7530] bond8: (slave bridge5): failed to get link speed/duplex [ 506.481268][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 506.561717][ T7525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 506.581608][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 506.592375][ T7525] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 506.671760][ T7512] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 506.710854][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 506.742836][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 506.779136][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3861'. [ 506.881718][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 507.516042][T15697] loop6: detected capacity change from 0 to 256 [ 507.554418][T15697] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 507.590796][T15697] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 507.632455][T15697] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 508.197642][T15701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3880'. [ 508.390560][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3880'. [ 511.654391][ T4300] net_ratelimit: 93 callbacks suppressed [ 511.654411][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 511.683750][ T4533] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 511.715190][ T7530] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 511.805607][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 511.860043][ T7530] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 511.902879][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 511.932385][ T7530] bond8: (slave bridge5): failed to get link speed/duplex [ 511.994028][ T4536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 512.072273][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 512.171350][ T7530] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 513.199919][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3892'. [ 516.731419][ T7521] net_ratelimit: 82 callbacks suppressed [ 516.731691][ T7521] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 516.881319][ T7521] bond8: (slave bridge5): failed to get link speed/duplex [ 516.983445][ T7521] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 517.001672][ T7530] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 517.090925][ T7521] bond8: (slave bridge5): failed to get link speed/duplex [ 517.110966][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 517.122095][ T4300] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 517.221128][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 517.281793][ T7530] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 517.289403][ T7530] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 518.676625][T15855] bond14 (unregistering): Released all slaves [ 520.080038][ T26] audit: type=1326 audit(2000000436.709:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 520.110312][ T26] audit: type=1326 audit(2000000436.709:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 520.137519][ T26] audit: type=1326 audit(2000000436.739:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 520.163857][ T26] audit: type=1326 audit(2000000436.739:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 520.211473][ T26] audit: type=1326 audit(2000000436.739:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 520.269417][ T26] audit: type=1326 audit(2000000436.739:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 520.326858][ T26] audit: type=1326 audit(2000000436.739:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 520.432236][ T26] audit: type=1326 audit(2000000436.739:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 520.472756][T15884] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3930'. [ 520.493106][ T26] audit: type=1326 audit(2000000436.739:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 520.548038][ T26] audit: type=1326 audit(2000000436.739:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.4.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 521.036154][T15911] bond6 (unregistering): Released all slaves [ 521.094572][T15908] loop6: detected capacity change from 0 to 4096 [ 521.623919][T15908] NILFS (loop6): invalid segment: Checksum error in segment payload [ 521.648064][T15908] NILFS (loop6): trying rollback from an earlier position [ 521.708771][T15908] NILFS (loop6): recovery complete [ 521.764020][T15922] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 521.821790][ T7525] net_ratelimit: 84 callbacks suppressed [ 521.821809][ T7525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 521.868381][T15925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3956'. [ 521.911692][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 521.951274][ T46] bond8: (slave bridge5): failed to get link speed/duplex [ 522.021082][ T4533] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 522.050800][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 522.091353][ T46] bond8: (slave bridge5): failed to get link speed/duplex [ 522.142462][ T46] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 522.171797][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 522.200760][ T46] bond8: (slave bridge5): failed to get link speed/duplex [ 522.250836][ T4533] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 523.122688][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3951'. [ 523.175362][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3953'. [ 525.030025][T15977] netlink: 'syz.4.3962': attribute type 11 has an invalid length. [ 525.373199][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'. [ 525.424700][T15987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3967'. [ 525.723093][T15997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3980'. [ 525.766261][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 525.782415][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3981'. [ 525.829196][T16001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3981'. [ 525.998046][T16003] bond5 (unregistering): Released all slaves [ 526.833719][ T5285] net_ratelimit: 77 callbacks suppressed [ 526.833819][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 526.992267][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 527.030765][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.083984][ T4533] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 527.121847][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 527.161979][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.202086][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 527.241179][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 527.280909][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.321165][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 527.485039][T16035] netlink: 'syz.0.3983': attribute type 1 has an invalid length. [ 527.595605][T16041] bond4: (slave bridge4): Enslaving as a backup interface with an up link [ 528.697260][T16050] bond8 (unregistering): Released all slaves [ 530.735389][T16068] kvm: pic: non byte write [ 531.901699][T16095] xt_CT: No such helper "snmp_trap" [ 531.982669][ T5285] net_ratelimit: 62 callbacks suppressed [ 531.982687][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.090776][ T46] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 532.128048][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 532.203883][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.251042][ T4299] bond8: (slave bridge5): failed to get link speed/duplex [ 532.258432][ T4299] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 532.341181][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.360950][ T4299] bond8: (slave bridge5): failed to get link speed/duplex [ 532.381056][ T46] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 532.460802][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.482387][T13896] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 532.670921][T13896] usb 7-1: Using ep0 maxpacket: 32 [ 532.678151][T13896] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 532.709699][T13896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 532.733540][T13896] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 532.770120][T13896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.806487][T13896] usb 7-1: config 0 descriptor?? [ 533.589310][T13896] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 533.997779][T13896] corsair-cpro: probe of 0003:1B1C:0C10.0007 failed with error -71 [ 534.008423][T13896] usb 7-1: USB disconnect, device number 17 [ 534.072668][T16117] fido_id[16117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 534.833264][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4010'. [ 536.555077][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4021'. [ 536.602476][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4021'. [ 536.678671][T16165] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4023'. [ 537.061939][ T7519] net_ratelimit: 111 callbacks suppressed [ 537.061958][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 537.110882][ T7519] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 537.131415][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 537.222286][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 537.260885][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 537.320807][ T7521] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 537.350821][ T7521] bond8: (slave bridge5): failed to get link speed/duplex [ 537.368418][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4034'. [ 537.611526][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 537.633873][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.374725][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 540.983976][T16270] loop6: detected capacity change from 0 to 512 [ 541.101224][T16270] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 541.167967][T16270] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.348949][T16281] netlink: 'syz.6.4056': attribute type 29 has an invalid length. [ 541.408392][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4056'. [ 541.430895][ T7521] device hsr_slave_0 left promiscuous mode [ 541.444398][ T7521] device hsr_slave_1 left promiscuous mode [ 542.089473][ T7521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.153859][ T7521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.212611][ T7521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.231248][ T7521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.244383][ T7521] device bridge_slave_0 left promiscuous mode [ 542.261208][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.440175][ T7521] device veth1_macvtap left promiscuous mode [ 542.458251][ T7521] device veth0_macvtap left promiscuous mode [ 542.478996][ T7521] device veth1_vlan left promiscuous mode [ 542.499685][ T7521] device veth0_vlan left promiscuous mode [ 544.128263][ T7521] bond1 (unregistering): Released all slaves [ 544.178293][T16309] tmpfs: Bad value for 'nr_blocks' [ 545.425496][ T7521] team0 (unregistering): Port device team_slave_1 removed [ 545.512439][ T7521] team0 (unregistering): Port device team_slave_0 removed [ 545.615515][ T7521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.696481][ T7521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.382535][ T7521] bond0 (unregistering): Released all slaves [ 546.508656][T16281] netlink: 'syz.6.4056': attribute type 29 has an invalid length. [ 546.517141][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4056'. [ 546.526925][T16292] net_ratelimit: 39 callbacks suppressed [ 546.526936][T16292] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 546.571001][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 546.590883][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 546.609092][ T6112] EXT4-fs (loop6): unmounting filesystem. [ 546.643037][ T7519] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 546.701560][ T4533] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 546.720732][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 546.770779][ T7519] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 546.825695][ T4300] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 546.884609][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4080'. [ 546.953632][ T4300] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 546.980941][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 547.120692][T13898] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 547.312791][T13898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.539508][T13898] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 547.553551][T13898] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 547.562723][T13898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.573977][T13898] usb 7-1: config 0 descriptor?? [ 548.278949][T16379] netlink: 'syz.5.4089': attribute type 29 has an invalid length. [ 548.301278][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4089'. [ 548.317488][T16379] netlink: 'syz.5.4089': attribute type 29 has an invalid length. [ 548.328050][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4089'. [ 548.353880][T13898] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 548.361264][T16382] netlink: 'syz.2.4090': attribute type 32 has an invalid length. [ 548.369106][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4090'. [ 548.382109][T13898] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 548.389184][T13898] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 548.390875][T16382] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 548.447035][T16386] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 549.064068][T13898] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 549.071225][T13898] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 549.078215][T13898] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 549.085434][T13898] saitek 0003:06A3:0621.0008: unknown main item tag 0x0 [ 549.092597][T13898] saitek 0003:06A3:0621.0008: collection stack underflow [ 549.099674][T13898] saitek 0003:06A3:0621.0008: item 0 1 0 12 parsing failed [ 549.121894][T13898] saitek 0003:06A3:0621.0008: parse failed [ 549.128197][T13898] saitek: probe of 0003:06A3:0621.0008 failed with error -22 [ 549.267020][T13898] usb 7-1: USB disconnect, device number 18 [ 549.289057][T16394] netlink: 'syz.2.4105': attribute type 1 has an invalid length. [ 549.379841][T16394] 8021q: adding VLAN 0 to HW filter on device bond7 [ 549.409786][T16396] bond7: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 549.482033][T16394] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 550.540812][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 550.540848][ T26] audit: type=1326 audit(2000000467.149:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.6.4101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61a959c799 code=0x0 [ 551.128492][T16439] netlink: 'syz.6.4111': attribute type 1 has an invalid length. [ 551.168047][T16439] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.185344][T16445] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 551.271548][T16439] bond5: (slave ip6gretap3): Enslaving as an active interface with an up link [ 551.540886][ T7523] net_ratelimit: 75 callbacks suppressed [ 551.540906][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 551.610977][ T7523] bond8: (slave bridge5): failed to get link speed/duplex [ 551.618188][T16459] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 551.803963][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 552.403461][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 552.430860][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 552.512737][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 552.591656][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 552.599156][ T46] bond8: (slave bridge5): failed to get link speed/duplex [ 552.651505][ T46] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 552.701000][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 553.587292][T16499] netlink: 'syz.5.4130': attribute type 1 has an invalid length. [ 554.566357][T16499] 8021q: adding VLAN 0 to HW filter on device bond8 [ 554.588925][T16504] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 554.716282][T16512] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 554.730798][T16517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4135'. [ 556.683185][ T5285] net_ratelimit: 53 callbacks suppressed [ 556.683211][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 556.721332][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 556.741542][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 557.538534][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 557.550223][T16555] netlink: 'syz.2.4146': attribute type 29 has an invalid length. [ 557.570713][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 557.597931][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4146'. [ 557.607411][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 557.654730][T16565] netlink: 'syz.4.4150': attribute type 1 has an invalid length. [ 557.745406][T16565] 8021q: adding VLAN 0 to HW filter on device bond14 [ 557.774528][T16555] netlink: 'syz.2.4146': attribute type 29 has an invalid length. [ 557.864741][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4146'. [ 557.927263][T16570] bond14: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 558.011178][T16565] bond14: (slave ip6gretap2): Enslaving as an active interface with an up link [ 558.079351][ T7527] bond8: (slave bridge5): failed to get link speed/duplex [ 558.091180][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 558.110692][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 558.178268][T16583] netlink: 1343 bytes leftover after parsing attributes in process `syz.4.4156'. [ 558.201144][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 558.401352][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4162'. [ 558.420017][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4162'. [ 558.435469][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4162'. [ 559.003475][T16595] gfs2: gfs2 mount does not exist [ 559.954628][T16625] netlink: 'syz.4.4169': attribute type 1 has an invalid length. [ 560.061023][T16625] 8021q: adding VLAN 0 to HW filter on device bond15 [ 560.177826][T16627] bond15: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 560.622896][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4171'. [ 560.678108][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4171'. [ 561.013593][T16635] device ip6gretap0 entered promiscuous mode [ 561.072546][T16635] device syz_tun entered promiscuous mode [ 561.094577][T16635] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 561.132834][T16635] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 561.742951][ T4536] net_ratelimit: 47 callbacks suppressed [ 561.742970][ T4536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 561.790757][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 561.810748][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 561.900808][ T4536] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 562.020915][ T46] bond8: (slave bridge5): failed to get link speed/duplex [ 562.073559][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 562.471035][ T4478] bond8: (slave bridge5): failed to get link speed/duplex [ 562.532243][ T4478] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 562.650985][ T7525] bond8: (slave bridge5): failed to get link speed/duplex [ 562.700814][ T46] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 562.809255][T16672] netlink: 'syz.2.4185': attribute type 1 has an invalid length. [ 562.973705][T16672] 8021q: adding VLAN 0 to HW filter on device bond8 [ 563.007016][T16679] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 563.383110][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.394082][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.936602][T16706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4193'. [ 566.753106][ T7519] net_ratelimit: 53 callbacks suppressed [ 566.753126][ T7519] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 566.800780][ T7519] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 566.840761][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 566.892879][ T7525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 566.950790][ T7519] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 566.980829][ T7519] bond8: (slave bridge5): failed to get link speed/duplex [ 567.080665][ T4300] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 567.090744][ T4300] bond8: (slave bridge5): failed to get link speed/duplex [ 567.109838][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 567.816184][ T4536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 571.328892][T16812] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4226'. [ 572.182169][ T7512] net_ratelimit: 71 callbacks suppressed [ 572.182981][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 572.330833][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 572.582018][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 572.631694][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 572.680799][ T4533] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 572.719946][T16838] overlayfs: failed to clone upperpath [ 572.748616][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 572.779886][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 572.863654][ T7530] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 572.879838][ T7530] bond8: (slave bridge5): failed to get link speed/duplex [ 572.951421][ T7525] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 576.833899][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4258'. [ 577.280688][ T5180] net_ratelimit: 56 callbacks suppressed [ 577.280706][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 578.362814][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 578.421837][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 578.590879][ T4533] bond8: (slave bridge5): failed to get link speed/duplex [ 578.598628][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 578.622316][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 578.667796][T16944] netlink: 'syz.2.4267': attribute type 1 has an invalid length. [ 578.734457][T16944] bond9: (slave gretap2): making interface the new active one [ 578.755252][T16944] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 578.811787][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 578.819910][ T7523] bond8: (slave bridge5): failed to get link speed/duplex [ 578.900814][ T4533] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 578.920715][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.352666][ T7523] net_ratelimit: 60 callbacks suppressed [ 582.352771][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.758966][T17002] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 583.294339][T17002] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 583.896325][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 583.904767][ T7523] bond8: (slave bridge5): failed to get link speed/duplex [ 584.001876][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 584.031152][ T5285] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.080828][ T7523] bond8: (slave bridge5): failed to get link speed/duplex [ 584.120807][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 584.141749][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 584.191849][ T5285] bond8: (slave bridge5): failed to get link speed/duplex [ 584.212136][ T26] audit: type=1326 audit(2000000500.849:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 584.235168][ T5285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 584.249461][T17022] overlayfs: failed to clone upperpath [ 584.280671][ T26] audit: type=1326 audit(2000000500.849:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 584.361014][ T26] audit: type=1326 audit(2000000500.879:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 584.450715][ T26] audit: type=1326 audit(2000000500.879:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 584.520795][ T26] audit: type=1326 audit(2000000500.879:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 584.600793][ T26] audit: type=1326 audit(2000000500.879:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 584.640639][ T26] audit: type=1326 audit(2000000500.879:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 584.701068][ T26] audit: type=1326 audit(2000000500.879:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 584.777316][ T26] audit: type=1326 audit(2000000500.879:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6275f9b607 code=0x7ffc0000 [ 584.808587][ T26] audit: type=1326 audit(2000000500.879:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17021 comm="syz.4.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6275f9c799 code=0x7ffc0000 [ 584.861422][T17036] VFS: Mount too revealing [ 586.970918][T17080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4303'. [ 587.098755][T17091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4308'. [ 587.147193][T17092] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4307'. [ 587.191729][T17092] unsupported nlmsg_type 40 [ 587.401970][ T7506] net_ratelimit: 53 callbacks suppressed [ 587.401989][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.450708][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 587.591421][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 587.625032][ T9] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.670662][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 587.741913][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.749864][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 587.780798][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 587.861920][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.890681][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 587.979924][T17119] loop6: detected capacity change from 0 to 64 [ 589.411066][T17160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.428994][T17160] team0: Port device bond0 added [ 589.452618][T17166] netlink: 'syz.2.4334': attribute type 16 has an invalid length. [ 589.490479][T17166] netlink: 'syz.2.4334': attribute type 17 has an invalid length. [ 590.805620][T17119] [ 590.808192][T17119] ====================================================== [ 590.815230][T17119] WARNING: possible circular locking dependency detected [ 590.822291][T17119] syzkaller #0 Not tainted [ 590.826715][T17119] ------------------------------------------------------ [ 590.833920][T17119] syz.6.4317/17119 is trying to acquire lock: [ 590.840057][T17119] ffff888036fe00f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 590.851119][T17119] [ 590.851119][T17119] but task is already holding lock: [ 590.858853][T17119] ffff88804a50a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 590.868841][T17119] [ 590.868841][T17119] which lock already depends on the new lock. [ 590.868841][T17119] [ 590.879500][T17119] [ 590.879500][T17119] the existing dependency chain (in reverse order) is: [ 590.888600][T17119] [ 590.888600][T17119] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 590.896718][T17119] __mutex_lock+0x12d/0xaf0 [ 590.901843][T17119] hfs_find_init+0x15b/0x1d0 [ 590.907128][T17119] hfs_extend_file+0x35d/0x13f0 [ 590.912581][T17119] hfs_bmap_reserve+0x103/0x420 [ 590.918034][T17119] hfs_cat_create+0x204/0x8e0 [ 590.923399][T17119] hfs_create+0x62/0xd0 [ 590.928156][T17119] path_openat+0x1181/0x2ee0 [ 590.933255][T17119] do_filp_open+0x1f1/0x430 [ 590.938356][T17119] do_sys_openat2+0x150/0x4b0 [ 590.943633][T17119] __x64_sys_open+0x11b/0x140 [ 590.948915][T17119] do_syscall_64+0x4c/0xa0 [ 590.953855][T17119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.960450][T17119] [ 590.960450][T17119] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 590.969915][T17119] __lock_acquire+0x2d07/0x7d10 [ 590.975315][T17119] lock_acquire+0x1bb/0x4a0 [ 590.980442][T17119] __mutex_lock+0x12d/0xaf0 [ 590.985485][T17119] hfs_extend_file+0xfb/0x13f0 [ 590.990771][T17119] hfs_bmap_reserve+0x103/0x420 [ 590.996141][T17119] __hfs_ext_write_extent+0x1fa/0x470 [ 591.002218][T17119] __hfs_ext_cache_extent+0x6b/0x9b0 [ 591.008117][T17119] hfs_extend_file+0x39c/0x13f0 [ 591.013489][T17119] hfs_get_block+0x40f/0xc50 [ 591.018606][T17119] __block_write_begin_int+0x55d/0x1a80 [ 591.024754][T17119] block_write_begin+0x96/0x1e0 [ 591.030305][T17119] cont_write_begin+0x5ea/0x800 [ 591.035852][T17119] hfs_write_begin+0x87/0xd0 [ 591.041055][T17119] cont_write_begin+0x2ad/0x800 [ 591.046424][T17119] hfs_write_begin+0x87/0xd0 [ 591.051691][T17119] hfs_file_truncate+0x1c0/0xa10 [ 591.057313][T17119] hfs_inode_setattr+0x4ab/0x6f0 [ 591.063029][T17119] notify_change+0xc74/0xf40 [ 591.068278][T17119] do_truncate+0x1ac/0x240 [ 591.073296][T17119] vfs_truncate+0x262/0x2f0 [ 591.078413][T17119] do_sys_truncate+0xf2/0x1c0 [ 591.083599][T17119] do_syscall_64+0x4c/0xa0 [ 591.088540][T17119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.095099][T17119] [ 591.095099][T17119] other info that might help us debug this: [ 591.095099][T17119] [ 591.105406][T17119] Possible unsafe locking scenario: [ 591.105406][T17119] [ 591.112840][T17119] CPU0 CPU1 [ 591.118189][T17119] ---- ---- [ 591.123623][T17119] lock(&tree->tree_lock#2/1); [ 591.128575][T17119] lock(&HFS_I(tree->inode)->extents_lock); [ 591.137422][T17119] lock(&tree->tree_lock#2/1); [ 591.145051][T17119] lock(&HFS_I(tree->inode)->extents_lock); [ 591.151017][T17119] [ 591.151017][T17119] *** DEADLOCK *** [ 591.151017][T17119] [ 591.159436][T17119] 4 locks held by syz.6.4317/17119: [ 591.164732][T17119] #0: ffff88804a508460 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 591.174063][T17119] #1: ffff888036fe1628 (&sb->s_type->i_mutex_key#39){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 591.184513][T17119] #2: ffff888036fe1478 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 591.195315][T17119] #3: ffff88804a50a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 591.205234][T17119] [ 591.205234][T17119] stack backtrace: [ 591.211129][T17119] CPU: 0 PID: 17119 Comm: syz.6.4317 Not tainted syzkaller #0 [ 591.219127][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.229400][T17119] Call Trace: [ 591.232839][T17119] [ 591.235854][T17119] dump_stack_lvl+0x188/0x24e [ 591.240559][T17119] ? load_image+0x400/0x400 [ 591.245269][T17119] ? show_regs_print_info+0x12/0x12 [ 591.250860][T17119] ? print_circular_bug+0x12b/0x1a0 [ 591.256102][T17119] check_noncircular+0x296/0x330 [ 591.261038][T17119] ? look_up_lock_class+0x75/0x140 [ 591.266234][T17119] ? add_chain_block+0x940/0x940 [ 591.271183][T17119] ? lockdep_lock+0xf1/0x1f0 [ 591.276114][T17119] ? _find_first_zero_bit+0xcf/0x100 [ 591.281833][T17119] __lock_acquire+0x2d07/0x7d10 [ 591.286780][T17119] ? mark_lock+0x94/0x320 [ 591.291653][T17119] ? verify_lock_unused+0x140/0x140 [ 591.297152][T17119] ? __lock_acquire+0x13cf/0x7d10 [ 591.302321][T17119] lock_acquire+0x1bb/0x4a0 [ 591.306854][T17119] ? hfs_extend_file+0xfb/0x13f0 [ 591.311883][T17119] ? __might_sleep+0xd0/0xd0 [ 591.317355][T17119] ? read_lock_is_recursive+0x10/0x10 [ 591.322914][T17119] ? preempt_count_add+0x8d/0x190 [ 591.328116][T17119] __mutex_lock+0x12d/0xaf0 [ 591.332814][T17119] ? hfs_extend_file+0xfb/0x13f0 [ 591.338324][T17119] ? hfs_bnode_read+0x221/0x7a0 [ 591.343594][T17119] ? hfs_extend_file+0xfb/0x13f0 [ 591.349117][T17119] ? mutex_lock_nested+0x10/0x10 [ 591.354395][T17119] ? hfs_bnode_read+0x354/0x7a0 [ 591.359553][T17119] ? hfs_bnode_read_u8+0x88/0xd0 [ 591.364701][T17119] ? hfs_bnode_read_u16+0xd0/0xd0 [ 591.369903][T17119] ? hfs_brec_lenoff+0xd8/0x180 [ 591.374778][T17119] hfs_extend_file+0xfb/0x13f0 [ 591.379744][T17119] ? hfs_bnode_read+0x354/0x7a0 [ 591.384937][T17119] ? hfs_ext_keycmp+0x1c3/0x310 [ 591.390182][T17119] ? hfs_get_block+0xc50/0xc50 [ 591.395100][T17119] ? hfs_rename+0x320/0x320 [ 591.400099][T17119] ? hfs_find_exit+0xa0/0xa0 [ 591.405084][T17119] ? do_raw_spin_unlock+0x11d/0x230 [ 591.410325][T17119] ? hfs_brec_find+0x3c9/0x500 [ 591.415200][T17119] hfs_bmap_reserve+0x103/0x420 [ 591.420330][T17119] __hfs_ext_write_extent+0x1fa/0x470 [ 591.425735][T17119] __hfs_ext_cache_extent+0x6b/0x9b0 [ 591.431312][T17119] ? hfs_find_init+0x15b/0x1d0 [ 591.436075][T17119] hfs_extend_file+0x39c/0x13f0 [ 591.441423][T17119] ? filemap_get_folios+0x103/0x780 [ 591.446726][T17119] ? hfs_get_block+0xc50/0xc50 [ 591.451513][T17119] ? filemap_get_folios+0x103/0x780 [ 591.456983][T17119] ? find_lock_entries+0xbb0/0xbb0 [ 591.462101][T17119] ? clean_bdev_aliases+0x682/0x790 [ 591.467461][T17119] hfs_get_block+0x40f/0xc50 [ 591.472067][T17119] ? hfs_free_extents+0x430/0x430 [ 591.477266][T17119] ? do_raw_spin_unlock+0x11d/0x230 [ 591.482831][T17119] ? create_page_buffers+0x24f/0x4a0 [ 591.488234][T17119] __block_write_begin_int+0x55d/0x1a80 [ 591.493979][T17119] ? filemap_add_folio+0x188/0x3c0 [ 591.499185][T17119] ? xas_load+0x127/0x140 [ 591.504071][T17119] ? hfs_free_extents+0x430/0x430 [ 591.509325][T17119] ? page_zero_new_buffers+0x650/0x650 [ 591.514794][T17119] ? PageHeadHuge+0x8f/0x1c0 [ 591.519528][T17119] ? hfs_free_extents+0x430/0x430 [ 591.524556][T17119] block_write_begin+0x96/0x1e0 [ 591.529403][T17119] cont_write_begin+0x5ea/0x800 [ 591.534253][T17119] ? __rcu_read_unlock+0x78/0xd0 [ 591.539286][T17119] ? generic_cont_expand_simple+0x200/0x200 [ 591.545395][T17119] ? put_page+0xea/0x270 [ 591.549673][T17119] hfs_write_begin+0x87/0xd0 [ 591.554500][T17119] ? hfs_free_extents+0x430/0x430 [ 591.559661][T17119] cont_write_begin+0x2ad/0x800 [ 591.564723][T17119] ? generic_cont_expand_simple+0x200/0x200 [ 591.570629][T17119] ? mark_lock+0x94/0x320 [ 591.574975][T17119] ? truncate_inode_pages_range+0x3a9/0x1090 [ 591.581052][T17119] hfs_write_begin+0x87/0xd0 [ 591.585712][T17119] ? hfs_free_extents+0x430/0x430 [ 591.590762][T17119] hfs_file_truncate+0x1c0/0xa10 [ 591.595889][T17119] ? __up_read+0x2b2/0x6b0 [ 591.600420][T17119] ? hfs_extend_file+0x13f0/0x13f0 [ 591.605745][T17119] ? unmap_mapping_range+0x91/0x100 [ 591.611333][T17119] hfs_inode_setattr+0x4ab/0x6f0 [ 591.616372][T17119] ? security_inode_setattr+0xd8/0x140 [ 591.622001][T17119] ? try_break_deleg+0x79/0x120 [ 591.626889][T17119] ? hfs_evict_inode+0x100/0x100 [ 591.632195][T17119] notify_change+0xc74/0xf40 [ 591.636914][T17119] do_truncate+0x1ac/0x240 [ 591.641330][T17119] ? put_page_bootmem+0x2c0/0x2c0 [ 591.646554][T17119] ? bpf_lsm_path_truncate+0x5/0x10 [ 591.651970][T17119] vfs_truncate+0x262/0x2f0 [ 591.656905][T17119] do_sys_truncate+0xf2/0x1c0 [ 591.662098][T17119] ? lock_chain_count+0x20/0x20 [ 591.667040][T17119] ? break_lease+0xd0/0xd0 [ 591.671538][T17119] ? lockdep_hardirqs_on+0x94/0x140 [ 591.676991][T17119] do_syscall_64+0x4c/0xa0 [ 591.681519][T17119] ? clear_bhb_loop+0x60/0xb0 [ 591.686314][T17119] ? clear_bhb_loop+0x60/0xb0 [ 591.691312][T17119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.697347][T17119] RIP: 0033:0x7f61a959c799 [ 591.702129][T17119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.722355][T17119] RSP: 002b:00007f61aa36e028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 591.731114][T17119] RAX: ffffffffffffffda RBX: 00007f61a9815fa0 RCX: 00007f61a959c799 [ 591.739560][T17119] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 591.747539][T17119] RBP: 00007f61a9632c99 R08: 0000000000000000 R09: 0000000000000000 [ 591.755527][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.763773][T17119] R13: 00007f61a9816038 R14: 00007f61a9815fa0 R15: 00007fff60265e88 [ 591.771877][T17119] [ 591.873682][ T7512] kworker/u4:14: attempt to access beyond end of device [ 591.873682][ T7512] loop6: rw=1, sector=159, nr_sectors = 1 limit=64 [ 591.899788][ T7512] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 591.923217][ T7512] kworker/u4:14: attempt to access beyond end of device [ 591.923217][ T7512] loop6: rw=1, sector=160, nr_sectors = 1 limit=64 [ 591.944265][ T7512] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 591.963186][ T7512] kworker/u4:14: attempt to access beyond end of device [ 591.963186][ T7512] loop6: rw=1, sector=161, nr_sectors = 1 limit=64 [ 592.005481][ T7512] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 592.015218][ T7512] kworker/u4:14: attempt to access beyond end of device [ 592.015218][ T7512] loop6: rw=1, sector=162, nr_sectors = 1 limit=64 [ 592.029288][ T7512] Buffer I/O error on dev loop6, logical block 162, lost async page write [ 592.039361][ T7512] kworker/u4:14: attempt to access beyond end of device [ 592.039361][ T7512] loop6: rw=1, sector=163, nr_sectors = 1 limit=64 [ 592.056786][ T7512] Buffer I/O error on dev loop6, logical block 163, lost async page write [ 592.067948][ T7512] kworker/u4:14: attempt to access beyond end of device [ 592.067948][ T7512] loop6: rw=1, sector=167, nr_sectors = 1 limit=64 [ 592.090728][ T7512] Buffer I/O error on dev loop6, logical block 167, lost async page write [ 592.099758][ T7512] kworker/u4:14: attempt to access beyond end of device [ 592.099758][ T7512] loop6: rw=1, sector=169, nr_sectors = 1 limit=64 [ 592.119111][ T7512] Buffer I/O error on dev loop6, logical block 169, lost async page write [ 592.128235][ T7512] kworker/u4:14: attempt to access beyond end of device [ 592.128235][ T7512] loop6: rw=1, sector=171, nr_sectors = 1 limit=64 [ 592.143316][ T7512] Buffer I/O error on dev loop6, logical block 171, lost async page write [ 592.152448][ T7512] kworker/u4:14: attempt to access beyond end of device [ 592.152448][ T7512] loop6: rw=1, sector=172, nr_sectors = 1 limit=64 [ 592.167487][ T7512] Buffer I/O error on dev loop6, logical block 172, lost async page write [ 592.176112][ T7512] kworker/u4:14: attempt to access beyond end of device [ 592.176112][ T7512] loop6: rw=1, sector=173, nr_sectors = 1 limit=64 [ 592.189912][ T7512] Buffer I/O error on dev loop6, logical block 173, lost async page write [ 592.450751][ T7512] net_ratelimit: 92 callbacks suppressed [ 592.450769][ T7512] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.470706][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 592.490678][ T7512] bond8: (slave bridge5): failed to get link speed/duplex [ 592.580811][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 592.600813][ T5180] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.610855][ T5180] bond8: (slave bridge5): failed to get link speed/duplex [ 592.690820][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 592.710777][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.720726][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 592.810750][ T5180] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 597.510715][ T7512] net_ratelimit: 125 callbacks suppressed [ 597.510741][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 597.540807][ T7523] bond8: (slave bridge5): failed to get link speed/duplex [ 597.560809][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.630759][ T7512] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 597.650858][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 597.670730][ T7506] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.740801][ T7506] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 597.760880][ T7506] bond8: (slave bridge5): failed to get link speed/duplex [ 597.780726][ T7523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.850801][ T7523] bond2: (slave ip6gretap1): failed to get link speed/duplex